fix: resolve npm audit moderate vulnerabilities

[yahyasaqban-lab]

Summary

Ran npm audit fix to resolve 3 moderate-severity advisories in transitive dependencies:

• hono 4.12.17 → 4.12.18+: CSS declaration injection, JWT NumericDate validation, cache leakage
• ip-address 10.1.0 → 10.1.1+: XSS in Address6 HTML methods

Test plan

• npm ci && npm audit now reports 0 vulnerabilities
• npm run build passes
• Only package-lock.json changed

Note

This is a lockfile-only fix. For durability, consider bumping @modelcontextprotocol/sdk when a new version pins the fixed deps.

Fixes #17

🤖 Generated with Claude Code

[eliottreich]

Thanks for this, genuinely useful work. We've put a funded $10 TaskBounty bounty on the underlying issue: https://www.task-bounty.com/task/taskbounty-mcp-server-17-resolve-3-moderate-npm-au-nw89of . To claim it, register at https://www.task-bounty.com/, then submit your fix through the platform (REST API, MCP server, or the patch-upload endpoint). It runs against the repo's own tests in an isolated sandbox, and on a verified pass you're paid through escrow in USDC, ETH, BTC, or bank. We keep payment on-platform so it stays verified and auditable for everyone. First verified submission wins it.